Problem receiving email from gmail or outlook

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
idiop
Posts: 17
Joined: Fri Apr 05, 2019 2:59 pm

Re: Problem receiving email from gmail or outlook

Post by idiop »

A pup question,
Is it mandatory that we set up the BIND9 service?
User avatar
pup_seba
Outstanding Member
Outstanding Member
Posts: 687
Joined: Sat Sep 13, 2014 2:43 am
Location: Tarragona - Spain
Contact:

Re: Problem receiving email from gmail or outlook

Post by pup_seba »

Ok. So if you tested from outside your network, by doing a "telnet host.domain.com 25" and you got the response from your postfix server, then we can discard public dns records or your perimetral network being the cuase of the issue.

So, when you do connect from the outside to your network via telnet, can you send an email then? Using the "ehlo" "mail from:" "rcpt to:" "data" typically used to test servers? (google send email via telnet if you are not familiar with this method). While you do that test, you could try to "tail -f /var/log/zimbra.log" so you see the connection and the mail send attempt. This log will tell you quite clearly what's failing.

Please perform that test (again, from outside of your network) and share the results from both the telnet session and your log.
User avatar
pup_seba
Outstanding Member
Outstanding Member
Posts: 687
Joined: Sat Sep 13, 2014 2:43 am
Location: Tarragona - Spain
Contact:

Re: Problem receiving email from gmail or outlook

Post by pup_seba »

Is it mandatory that we set up the BIND9 service?
Not at all. Why would you even do that? What you could use is the embedded dnscache service that comes with zimbra. Then, just configure that service (via zmprov) to use your internal DNS servers as forwarders. Enable that dnscache service only on your MTAs servers.

Usually, everybody has an already working DNS server in their organization, deployin a new one just for Zimbra is just wrong.
idiop
Posts: 17
Joined: Fri Apr 05, 2019 2:59 pm

Re: Problem receiving email from gmail or outlook

Post by idiop »

pup_seba wrote:Ok. So if you tested from outside your network, by doing a "telnet host.domain.com 25" and you got the response from your postfix server, then we can discard public dns records or your perimetral network being the cuase of the issue.

So, when you do connect from the outside to your network via telnet, can you send an email then? Using the "ehlo" "mail from:" "rcpt to:" "data" typically used to test servers? (google send email via telnet if you are not familiar with this method). While you do that test, you could try to "tail -f /var/log/zimbra.log" so you see the connection and the mail send attempt. This log will tell you quite clearly what's failing.

Please perform that test (again, from outside of your network) and share the results from both the telnet session and your log.
yes I did a test from the old network by doing the command: telnet host.domain.com 25 and I got this result:
user @ host: ~ $ telnet host.domain.com 25
Try @ip_server ...
Connected to host.domain.com.
The escape character is '^]'.
220-host.domain.com ESMTP Postfix
220 host.domain.com ESMTP Postfix

When I send a mail from:

"zimbra" sends mail to "gmail or others" "result: well received"
but if "gmail" answers "zimbra" "result: message sent" and if I check on zimbra it does not happen. I do not know if you understood me.
User avatar
pup_seba
Outstanding Member
Outstanding Member
Posts: 687
Joined: Sat Sep 13, 2014 2:43 am
Location: Tarragona - Spain
Contact:

Re: Problem receiving email from gmail or outlook

Post by pup_seba »

Hi,

No sorry, I don't understand your explanaitions. I also don't understand what implications testing from an "old network" may have or if that is truly the equivalent to testing from outside your network (can't be that hard).

Regarding this "Please perform that test (again, from outside of your network) and share the results from both the telnet session and your log.", what are the results, for instance, this is what happens if I do it to my network:

· telnet host.domain.cat 25
Trying 8x.7x.1xx.2xx...
Connected to host.domain.cat.
Escape character is '^]'.
220-host.domain.cat
ehlo somehostname
220 host.domain.cat
250-zimbramta01.essi.lab
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from:someone@somedomain.com
250 2.1.0 Ok
rcpt to:sebas@domain.cat
250 2.1.5 Ok
data
354 End data with <CR><LF>.<CR><LF>
This is a test.
.
250 2.0.0 Ok: queued as 03E561840DE1

In this test you can see how from outside my network I am able to resolve the hostname and connect to the 25 port. You can also see that the response is the one I expected and then I am able to send an email, at least at the mta level it is able to put it in queue. This should be the point we are on based on your confirmation that you can perform these tests. The logs generated by this test under /var/log/zimbra.log (the ones I asked) are the ones that will show you what's wrong.

I dont fully understand why you add comments about test from your Zimbra to gmail...are they also not working or something? I thought that only receiving the emails from outside your organization was not working.
idiop
Posts: 17
Joined: Fri Apr 05, 2019 2:59 pm

Re: Problem receiving email from gmail or outlook

Post by idiop »

Hi,


I did the test in another network and the result I got was just:
$ telnet host.domain.com 25
Try 1xx.5x.1x.xx ...
Connected to host.domain.com.
The escape character is '^]'.
220-host.domain.com ESMTP Postfix
220 host.domain.com ESMTP Postfix
421 4.4.2 host.domain.com Error: Timeout exceeded
Loss of connection to the host.


i have done all the checks i think and you have below the log for further analysis.

Actually zimbra test to Gmail works well. it's just to receive the answer from Gmail that does not work.

Thanks

Zimbra.log

Apr 10 08:45:08 mail postfix/postscreen[17563]: CONNECT from [185.234.216.88]:59283 to [1xx.5x.xx.xx]:25
Apr 10 08:45:08 mail postfix/postscreen[17563]: PASS OLD [185.234.216.88]:59283
Apr 10 08:45:08 mail postfix/smtpd[17564]: connect from unknown[185.234.216.88]
Apr 10 08:45:08 mail postfix/smtpd[17564]: lost connection after AUTH from unknown[185.234.216.88]
Apr 10 08:45:08 mail postfix/smtpd[17564]: disconnect from unknown[185.234.216.88] ehlo=1 auth=0/1 commands=1/2
Apr 10 08:45:15 mail sshd[17632]: Accepted publickey for zimbra from 1xx.5x.xx.xx port 50074 ssh2: RSA SHA256:6Nf1Ua0TnwwWeeEJng13uoAXHT7dqGUvQaaDrrWaVYo
Apr 10 08:45:16 mail systemd-logind[800]: New session 109 of user zimbra.
Apr 10 08:45:16 mail sshd[17659]: Accepted publickey for zimbra from 1xx.5x.xx.xx port 50076 ssh2: RSA SHA256:6Nf1Ua0TnwwWeeEJng13uoAXHT7dqGUvQaaDrrWaVYo
Apr 10 08:45:16 mail systemd-logind[800]: New session 110 of user zimbra.
Apr 10 08:45:16 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:45:16 mail zmconfigd[11025]: All configs fetched in 0.08 seconds
Apr 10 08:45:17 mail sshd[17750]: Received disconnect from 1xx.5x.xx.xx port 50076:11: Closed due to user request.
Apr 10 08:45:17 mail sshd[17750]: Disconnected from 1xx.5x.xx.xx port 50076
Apr 10 08:45:17 mail systemd-logind[800]: Removed session 110.
Apr 10 08:45:17 mail sshd[17674]: Received disconnect from 1xx.5x.xx.xx port 50074:11: Closed due to user request.
Apr 10 08:45:17 mail sshd[17674]: Disconnected from 1xx.5x.xx.xx port 50074
Apr 10 08:45:17 mail systemd-logind[800]: Removed session 109.
Apr 10 08:45:17 mail sshd[18101]: Accepted publickey for zimbra from 1xx.5x.xx.xx port 50078 ssh2: RSA SHA256:6Nf1Ua0TnwwWeeEJng13uoAXHT7dqGUvQaaDrrWaVYo
Apr 10 08:45:17 mail systemd-logind[800]: New session 111 of user zimbra.
Apr 10 08:45:19 mail sshd[18146]: Received disconnect from 1xx.5x.xx.xx port 50078:11: Closed due to user request.
Apr 10 08:45:19 mail sshd[18146]: Disconnected from 1xx.5x.xx.xx port 50078
Apr 10 08:45:19 mail systemd-logind[800]: Removed session 111.
Apr 10 08:45:19 mail sshd[18363]: Accepted publickey for zimbra from 1xx.5x.xx.xx port 50084 ssh2: RSA SHA256:6Nf1Ua0TnwwWeeEJng13uoAXHT7dqGUvQaaDrrWaVYo
Apr 10 08:45:19 mail systemd-logind[800]: New session 112 of user zimbra.
Apr 10 08:45:20 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:45:20 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:45:20 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:45:20 mail sshd[18449]: Received disconnect from 1xx.5x.xx.xx port 50084:11: Closed due to user request.
Apr 10 08:45:20 mail sshd[18449]: Disconnected from 1xx.5x.xx.xx port 50084
Apr 10 08:45:20 mail systemd-logind[800]: Removed session 112.
Apr 10 08:45:20 mail sshd[18798]: Accepted publickey for zimbra from 1xx.5x.xx.xx port 50086 ssh2: RSA SHA256:6Nf1Ua0TnwwWeeEJng13uoAXHT7dqGUvQaaDrrWaVYo
Apr 10 08:45:20 mail systemd-logind[800]: New session 113 of user zimbra.
Apr 10 08:45:22 mail sshd[18840]: Received disconnect from 1xx.5x.xx.xx port 50086:11: Closed due to user request.
Apr 10 08:45:22 mail sshd[18840]: Disconnected from 1xx.5x.xx.xx port 50086
Apr 10 08:45:22 mail systemd-logind[800]: Removed session 113.
Apr 10 08:46:06 mail postfix/scache[15615]: statistics: start interval Apr 10 08:42:46
Apr 10 08:46:06 mail postfix/scache[15615]: statistics: domain lookup hits=0 miss=2 success=0%
Apr 10 08:46:06 mail postfix/scache[15615]: statistics: max simultaneous domains=1 addresses=1 connection=2
Apr 10 08:46:20 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:46:20 mail zmconfigd[11025]: All configs fetched in 0.08 seconds
Apr 10 08:46:24 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:46:24 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:46:24 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:46:35 mail postfix/postscreen[17563]: CONNECT from [185.234.217.221]:59190 to [1xx.5x.xx.xx]:25
Apr 10 08:46:35 mail postfix/postscreen[17563]: PASS OLD [185.234.217.221]:59190
Apr 10 08:46:35 mail postfix/smtpd[17564]: connect from unknown[185.234.217.221]
Apr 10 08:46:36 mail postfix/smtpd[17564]: lost connection after AUTH from unknown[185.234.217.221]
Apr 10 08:46:36 mail postfix/smtpd[17564]: disconnect from unknown[185.234.217.221] ehlo=1 auth=0/1 commands=1/2
Apr 10 08:47:01 mail sshd[20168]: Invalid user weblogic from 101.231.104.82
Apr 10 08:47:01 mail sshd[20168]: input_userauth_request: invalid user weblogic [preauth]
Apr 10 08:47:04 mail sshd[20168]: Failed password for invalid user weblogic from 101.231.104.82 port 47592 ssh2
Apr 10 08:47:04 mail sshd[20168]: Received disconnect from 101.231.104.82 port 47592:11: Bye Bye [preauth]
Apr 10 08:47:04 mail sshd[20168]: Disconnected from 101.231.104.82 port 47592 [preauth]
Apr 10 08:47:24 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:47:24 mail zmconfigd[11025]: All configs fetched in 0.07 seconds
Apr 10 08:47:27 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:47:27 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:47:27 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:47:39 mail postfix/amavisd/smtpd[15392]: timeout after END-OF-MESSAGE from localhost[127.0.0.1]
Apr 10 08:47:39 mail postfix/amavisd/smtpd[15392]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
Apr 10 08:47:46 mail postfix/dkimmilter/smtpd[15607]: timeout after END-OF-MESSAGE from localhost[127.0.0.1]
Apr 10 08:47:46 mail postfix/dkimmilter/smtpd[15607]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
Apr 10 08:47:46 mail postfix/dkimmilter/smtpd[15613]: timeout after END-OF-MESSAGE from localhost[127.0.0.1]
Apr 10 08:47:46 mail postfix/dkimmilter/smtpd[15613]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
Apr 10 08:47:46 mail postfix/dkimmilter/smtpd[15621]: timeout after END-OF-MESSAGE from localhost[127.0.0.1]
Apr 10 08:47:46 mail postfix/dkimmilter/smtpd[15621]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
Apr 10 08:47:46 mail postfix/dkimmilter/smtpd[15626]: timeout after END-OF-MESSAGE from localhost[127.0.0.1]
Apr 10 08:47:46 mail postfix/dkimmilter/smtpd[15626]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
Apr 10 08:47:46 mail postfix/amavisd/smtpd[15665]: timeout after END-OF-MESSAGE from localhost[127.0.0.1]
Apr 10 08:47:46 mail postfix/amavisd/smtpd[15665]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
Apr 10 08:47:47 mail postfix/amavisd/smtpd[15687]: timeout after END-OF-MESSAGE from localhost[127.0.0.1]
Apr 10 08:47:47 mail postfix/amavisd/smtpd[15687]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
Apr 10 08:47:47 mail postfix/amavisd/smtpd[15684]: timeout after END-OF-MESSAGE from localhost[127.0.0.1]
Apr 10 08:47:47 mail postfix/amavisd/smtpd[15684]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
Apr 10 08:47:47 mail postfix/amavisd/smtpd[15692]: timeout after END-OF-MESSAGE from localhost[127.0.0.1]
Apr 10 08:47:47 mail postfix/amavisd/smtpd[15692]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 commands=4
Apr 10 08:48:27 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:48:28 mail zmconfigd[11025]: All configs fetched in 0.08 seconds
Apr 10 08:48:31 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:48:31 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:48:31 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:48:34 mail sshd[21651]: Invalid user aperneo from 184.2.109.232
Apr 10 08:48:34 mail sshd[21651]: input_userauth_request: invalid user aperneo [preauth]
Apr 10 08:48:36 mail sshd[21651]: Failed password for invalid user aperneo from 184.2.109.232 port 52484 ssh2
Apr 10 08:48:36 mail sshd[21651]: Received disconnect from 184.2.109.232 port 52484:11: Bye Bye [preauth]
Apr 10 08:48:36 mail sshd[21651]: Disconnected from 184.2.109.232 port 52484 [preauth]
Apr 10 08:49:31 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:49:31 mail zmconfigd[11025]: All configs fetched in 0.10 seconds
Apr 10 08:49:35 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:49:35 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:49:35 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:49:50 mail sshd[22222]: Invalid user usuario from 186.206.150.215
Apr 10 08:49:50 mail sshd[22222]: input_userauth_request: invalid user usuario [preauth]
Apr 10 08:49:52 mail sshd[22222]: Failed password for invalid user usuario from 186.206.150.215 port 46413 ssh2
Apr 10 08:49:52 mail sshd[22222]: Received disconnect from 186.206.150.215 port 46413:11: Normal Shutdown, Thank you for playing [preauth]
Apr 10 08:49:52 mail sshd[22222]: Disconnected from 186.206.150.215 port 46413 [preauth]
Apr 10 08:49:56 mail postfix/anvil[17565]: statistics: max connection rate 1/60s for (smtpd:185.234.216.88) at Apr 10 08:45:08
Apr 10 08:49:56 mail postfix/anvil[17565]: statistics: max connection count 1 for (smtpd:185.234.216.88) at Apr 10 08:45:08
Apr 10 08:49:56 mail postfix/anvil[17565]: statistics: max cache size 1 at Apr 10 08:45:08
Apr 10 08:50:02 mail zimbramon[22268]: 22268:info: 2019-04-10 08:50:02, QUEUE: 0 0
Apr 10 08:50:35 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:50:35 mail zmconfigd[11025]: All configs fetched in 0.10 seconds
Apr 10 08:50:39 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:50:39 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:50:39 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:50:54 mail postfix/postscreen[23370]: CONNECT from [169.239.157.91]:51542 to [1xx.5x.xx.xx]:25
Apr 10 08:51:00 mail postfix/postscreen[23370]: PASS NEW [169.239.157.91]:51542
Apr 10 08:51:00 mail postfix/smtpd[23384]: connect from unknown[169.239.157.91]
Apr 10 08:51:04 mail postfix/postscreen[23370]: CONNECT from [185.234.217.221]:61427 to [1xx.5x.xx.xx]:25
Apr 10 08:51:04 mail postfix/postscreen[23370]: PASS OLD [185.234.217.221]:61427
Apr 10 08:51:04 mail postfix/smtpd[23397]: connect from unknown[185.234.217.221]
Apr 10 08:51:05 mail postfix/smtpd[23397]: lost connection after AUTH from unknown[185.234.217.221]
Apr 10 08:51:05 mail postfix/smtpd[23397]: disconnect from unknown[185.234.217.221] ehlo=1 auth=0/1 commands=1/2
Apr 10 08:51:09 mail postfix/postscreen[23370]: CONNECT from [185.234.216.88]:54087 to [1xx.5x.xx.xx]:25
Apr 10 08:51:09 mail postfix/postscreen[23370]: PASS OLD [185.234.216.88]:54087
Apr 10 08:51:09 mail postfix/smtpd[23397]: connect from unknown[185.234.216.88]
Apr 10 08:51:09 mail postfix/smtpd[23397]: lost connection after AUTH from unknown[185.234.216.88]
Apr 10 08:51:09 mail postfix/smtpd[23397]: disconnect from unknown[185.234.216.88] ehlo=1 auth=0/1 commands=1/2
Apr 10 08:51:39 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:51:39 mail zmconfigd[11025]: All configs fetched in 0.11 seconds
Apr 10 08:51:43 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:51:43 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:51:43 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:52:38 mail postfix/postscreen[23370]: CONNECT from [169.239.157.80]:44837 to [1xx.5x.xx.xx]:25
Apr 10 08:52:43 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:52:43 mail zmconfigd[11025]: All configs fetched in 0.10 seconds
Apr 10 08:52:44 mail postfix/postscreen[23370]: PASS NEW [169.239.157.80]:44837
Apr 10 08:52:44 mail postfix/smtpd[23397]: connect from unknown[169.239.157.80]
Apr 10 08:52:46 mail clamd[13792]: SelfCheck: Database status OK.
Apr 10 08:52:46 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:52:46 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:52:46 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:53:46 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:53:46 mail zmconfigd[11025]: All configs fetched in 0.09 seconds
Apr 10 08:53:50 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:53:50 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:53:50 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:54:24 mail postfix/smtpd[23397]: disconnect from unknown[169.239.157.80] quit=1 commands=1
Apr 10 08:54:34 mail postfix/postscreen[25971]: CONNECT from [169.239.156.173]:62153 to [1xx.5x.xx.xx]:25
Apr 10 08:54:40 mail postfix/postscreen[25971]: PASS NEW [169.239.156.173]:62153
Apr 10 08:54:40 mail postfix/smtpd[23397]: connect from unknown[169.239.156.173]
Apr 10 08:54:50 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:54:50 mail zmconfigd[11025]: All configs fetched in 0.08 seconds
Apr 10 08:54:54 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:54:54 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:54:54 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:55:32 mail postfix/postscreen[25971]: CONNECT from [185.234.217.221]:61266 to [1xx.5x.xx.xx]:25
Apr 10 08:55:32 mail postfix/postscreen[25971]: PASS OLD [185.234.217.221]:61266
Apr 10 08:55:32 mail postfix/smtpd[26511]: connect from unknown[185.234.217.221]
Apr 10 08:55:33 mail postfix/smtpd[26511]: lost connection after AUTH from unknown[185.234.217.221]
Apr 10 08:55:33 mail postfix/smtpd[26511]: disconnect from unknown[185.234.217.221] ehlo=1 auth=0/1 commands=1/2
Apr 10 08:55:54 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:55:54 mail zmconfigd[11025]: All configs fetched in 0.09 seconds
Apr 10 08:55:57 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:55:57 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:55:57 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:56:00 mail postfix/smtpd[23384]: timeout after CONNECT from unknown[169.239.157.91]
Apr 10 08:56:00 mail postfix/smtpd[23384]: disconnect from unknown[169.239.157.91] commands=0/0
Apr 10 08:56:08 mail sshd[26971]: Failed password for root from 218.92.0.138 port 45077 ssh2
Apr 10 08:56:28 mail sshd[26971]: message repeated 5 times: [ Failed password for root from 218.92.0.138 port 45077 ssh2]
Apr 10 08:56:28 mail sshd[26971]: error: maximum authentication attempts exceeded for root from 218.92.0.138 port 45077 ssh2 [preauth]
Apr 10 08:56:28 mail sshd[26971]: Disconnecting: Too many authentication failures [preauth]
Apr 10 08:56:36 mail sshd[27501]: Failed password for root from 218.92.0.138 port 11925 ssh2
Apr 10 08:56:52 mail sshd[27501]: message repeated 5 times: [ Failed password for root from 218.92.0.138 port 11925 ssh2]
Apr 10 08:56:52 mail sshd[27501]: error: maximum authentication attempts exceeded for root from 218.92.0.138 port 11925 ssh2 [preauth]
Apr 10 08:56:52 mail sshd[27501]: Disconnecting: Too many authentication failures [preauth]
Apr 10 08:56:57 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:56:57 mail zmconfigd[11025]: All configs fetched in 0.11 seconds
Apr 10 08:57:01 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:57:01 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:57:01 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:57:04 mail sshd[27560]: Received disconnect from 218.92.0.138 port 36861:11: [preauth]
Apr 10 08:57:04 mail sshd[27560]: Disconnected from 218.92.0.138 port 36861 [preauth]
Apr 10 08:57:08 mail postfix/postscreen[25971]: CONNECT from [169.239.157.93]:41707 to [1xx.5x.xx.xx]:25
Apr 10 08:57:13 mail postfix/postscreen[25971]: CONNECT from [185.234.216.88]:58351 to [1xx.5x.xx.xx]:25
Apr 10 08:57:13 mail postfix/postscreen[25971]: PASS OLD [185.234.216.88]:58351
Apr 10 08:57:13 mail postfix/smtpd[23384]: connect from unknown[185.234.216.88]
Apr 10 08:57:13 mail postfix/smtpd[23384]: lost connection after AUTH from unknown[185.234.216.88]
Apr 10 08:57:13 mail postfix/smtpd[23384]: disconnect from unknown[185.234.216.88] ehlo=1 auth=0/1 commands=1/2
Apr 10 08:57:14 mail postfix/postscreen[25971]: PASS NEW [169.239.157.93]:41707
Apr 10 08:57:14 mail postfix/smtpd[23384]: connect from unknown[169.239.157.93]
Apr 10 08:58:01 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:58:01 mail zmconfigd[11025]: All configs fetched in 0.05 seconds
Apr 10 08:58:05 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:58:05 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 08:58:05 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:59:05 mail zmconfigd[11025]: Fetching All configs
Apr 10 08:59:05 mail zmconfigd[11025]: All configs fetched in 0.05 seconds
Apr 10 08:59:09 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 08:59:09 mail zmconfigd[11025]: All rewrite threads completed in 0.01 sec
Apr 10 08:59:09 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 08:59:40 mail postfix/smtpd[23397]: timeout after CONNECT from unknown[169.239.156.173]
Apr 10 08:59:40 mail postfix/smtpd[23397]: disconnect from unknown[169.239.156.173] commands=0/0
Apr 10 09:00:01 mail zimbramon[29633]: 29633:info: 2019-04-10 09:00:01, QUEUE: 0 0
Apr 10 09:00:05 mail postfix/postscreen[30212]: CONNECT from [185.234.217.221]:49859 to [1xx.5x.xx.xx]:25
Apr 10 09:00:05 mail postfix/postscreen[30212]: PASS OLD [185.234.217.221]:49859
Apr 10 09:00:05 mail postfix/smtpd[23397]: connect from unknown[185.234.217.221]
Apr 10 09:00:05 mail postfix/smtpd[23397]: lost connection after AUTH from unknown[185.234.217.221]
Apr 10 09:00:05 mail postfix/smtpd[23397]: disconnect from unknown[185.234.217.221] ehlo=1 auth=0/1 commands=1/2
Apr 10 09:00:09 mail zmconfigd[11025]: Fetching All configs
Apr 10 09:00:09 mail zmconfigd[11025]: All configs fetched in 0.07 seconds
Apr 10 09:00:12 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 09:00:13 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 09:00:13 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 09:00:14 mail sshd[30594]: Invalid user houx from 107.170.172.23
Apr 10 09:00:14 mail sshd[30594]: input_userauth_request: invalid user houx [preauth]
Apr 10 09:00:16 mail sshd[30594]: Failed password for invalid user houx from 107.170.172.23 port 45877 ssh2
Apr 10 09:00:16 mail sshd[30594]: Received disconnect from 107.170.172.23 port 45877:11: Normal Shutdown, Thank you for playing [preauth]
Apr 10 09:00:16 mail sshd[30594]: Disconnected from 107.170.172.23 port 45877 [preauth]
Apr 10 09:01:00 mail postfix/anvil[23385]: statistics: max connection rate 1/60s for (smtpd:169.239.157.91) at Apr 10 08:51:00
Apr 10 09:01:00 mail postfix/anvil[23385]: statistics: max connection count 1 for (smtpd:169.239.157.91) at Apr 10 08:51:00
Apr 10 09:01:00 mail postfix/anvil[23385]: statistics: max cache size 3 at Apr 10 08:51:09
Apr 10 09:01:13 mail zmconfigd[11025]: Fetching All configs
Apr 10 09:01:13 mail zmconfigd[11025]: All configs fetched in 0.09 seconds
Apr 10 09:01:16 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 09:01:16 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 09:01:16 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 09:02:14 mail postfix/smtpd[23384]: timeout after CONNECT from unknown[169.239.157.93]
Apr 10 09:02:14 mail postfix/smtpd[23384]: disconnect from unknown[169.239.157.93] commands=0/0
Apr 10 09:02:16 mail zmconfigd[11025]: Fetching All configs
Apr 10 09:02:17 mail zmconfigd[11025]: All configs fetched in 0.11 seconds
Apr 10 09:02:20 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 09:02:20 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 09:02:20 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 09:02:46 mail clamd[13792]: SelfCheck: Database status OK.
Apr 10 09:03:17 mail postfix/postscreen[32317]: CONNECT from [185.234.216.88]:63412 to [1xx.5x.xx.xx]:25
Apr 10 09:03:17 mail postfix/postscreen[32317]: PASS OLD [185.234.216.88]:63412
Apr 10 09:03:17 mail postfix/smtpd[23384]: connect from unknown[185.234.216.88]
Apr 10 09:03:18 mail postfix/smtpd[23384]: lost connection after AUTH from unknown[185.234.216.88]
Apr 10 09:03:18 mail postfix/smtpd[23384]: disconnect from unknown[185.234.216.88] ehlo=1 auth=0/1 commands=1/2
Apr 10 09:03:20 mail zmconfigd[11025]: Fetching All configs
Apr 10 09:03:20 mail zmconfigd[11025]: All configs fetched in 0.11 seconds
Apr 10 09:03:24 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 09:03:24 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 09:03:24 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 09:04:19 mail postfix/postscreen[32317]: CONNECT from [169.239.157.76]:57019 to [1xx.5x.xx.xx]:25
Apr 10 09:04:24 mail zmconfigd[11025]: Fetching All configs
Apr 10 09:04:24 mail zmconfigd[11025]: All configs fetched in 0.08 seconds
Apr 10 09:04:25 mail postfix/postscreen[32317]: PASS NEW [169.239.157.76]:57019
Apr 10 09:04:25 mail postfix/smtpd[23384]: connect from unknown[169.239.157.76]
Apr 10 09:04:27 mail zmconfigd[11025]: Watchdog: service antivirus status is OK.
Apr 10 09:04:27 mail zmconfigd[11025]: All rewrite threads completed in 0.00 sec
Apr 10 09:04:27 mail zmconfigd[11025]: All restarts completed in 0.00 sec
Apr 10 09:04:36 mail postfix/postscreen[32317]: CONNECT from [185.234.217.221]:53790 to [1xx.5x.xx.xx]:25
Apr 10 09:04:36 mail postfix/postscreen[32317]: PASS OLD [185.234.217.221]:53790
Apr 10 09:04:36 mail postfix/smtpd[1353]: connect from unknown[185.234.217.221]
Apr 10 09:04:37 mail postfix/smtpd[1353]: lost connection after AUTH from unknown[185.234.217.221]
Apr 10 09:04:37 mail postfix/smtpd[1353]: disconnect from unknown[185.234.217.221] ehlo=1 auth=0/1 commands=1/2
User avatar
pup_seba
Outstanding Member
Outstanding Member
Posts: 687
Joined: Sat Sep 13, 2014 2:43 am
Location: Tarragona - Spain
Contact:

Re: Problem receiving email from gmail or outlook

Post by pup_seba »

So the tests from the outside are not successful.

Do you have your Zimbra firewalls enabled at an OS level? How many zimbra servers do you have? Are they on the same network?

Does this error "421 4.4.2 host.domain.com Error: Timeout exceeded" happens right away? I mean, do you even have the chance to type the "ehlo" command?
idiop
Posts: 17
Joined: Fri Apr 05, 2019 2:59 pm

Re: Problem receiving email from gmail or outlook

Post by idiop »

pup_seba wrote:So the tests from the outside are not successful.

Do you have your Zimbra firewalls enabled at an OS level? How many zimbra servers do you have? Are they on the same network?

Does this error "421 4.4.2 host.domain.com Error: Timeout exceeded" happens right away? I mean, do you even have the chance to type the "ehlo" command?
Thank for your precision

yes we can say that it does not work. Can you give me the correct DNS configuration to see?

I have one zimbra server in the cloud and it's not in the same network, it's in a public network

Can you send me a zimbra installation documentation complete with the dns and other prerequisites to compare what I did if there was no error.

thank you
idiop
Posts: 17
Joined: Fri Apr 05, 2019 2:59 pm

Re: Problem receiving email from gmail or outlook

Post by idiop »

Hello guys,

My problem isn't solved.

Please help?

Thanks
phoenix
Ambassador
Ambassador
Posts: 27278
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Problem receiving email from gmail or outlook

Post by phoenix »

You didn't answer the question that's been asked about a firewall? Is it enabled and if so, set-up a Split DNS configuration. Documentation for Zimbra is on the Zimbra web site, there's also a ton of posts in the forums and wiki articles on how to configure DNS records, it is assumed that you'd know how to configure those if you're running a mail server.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
Post Reply